CVE-2007-6396 - CVE House
Back to Database
Status published High CVE-2007-6396

Direct static code injection vulnerability in index.php in Flat PHP...

Vulnerability Description

Direct static code injection vulnerability in index.php in Flat PHP Board 1.2 and earlier allows remote attackers to inject arbitrary PHP code via the (1) username, (2) password, and (3) email parameters when registering a user account, which can be executed by accessing the user's php file for this account. NOTE: similar code injection might be possible in a user profile.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-6396

Credits & Attribution

No credits recorded in the NVD database.

References

More from myupb

View All →
CVE-2015-2217
Multiple cross-site scripting (XSS) vulnerabilities in Ultimate PHP Board (aka...
Medium 4.3
CVE-2008-6727
Cross-site scripting (XSS) vulnerability in Ultimate PHP Board (UPB) 2.2.2,...
Medium 4.3
CVE-2007-6399
index.php in Flat PHP Board 1.2 and earlier allows remote...
Medium 6.5
CVE-2003-0395
Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute...
High 7.5

Affected Vendor

Affected Software

flat php board
Vulnerable Versions:
1.2

Timeline

Official Publish: December 17th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.